INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

In accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, known as the „General Data Protection Regulation” or in short, „GDPR”, we bring to your attention the following aspects related to the processing of your personal data. The document you are just reading is one of the ways we want you to know that the trust you place in us is not one-way. This notice contains important information for you explaining how we process your personal data.

WHO DO YOU GIVE YOUR PERSONAL DATA TO?

Your personal data are processed by S.C. MARTIN CLINIC S.R.L., with registered office in Str. Luigi Cazzavillan, nr.20, Bucharest, order number in the Trade Register J40/3037/07,03,2019, CUI40748214.

Telephone 0754 882 288, E-mail: office@martinclinic.ro, hereinafter referred to as the „Operator” in accordance with the legislation in force.

WHAT PERSONAL DATA DOES THE CONTROLLER PROCESS?

The company collects your personal data directly from you, so you have control over the type of information you give us.

So when you create an account on our website, you give us your e-mail address, first and last name.

When you place an order, you provide us with information such as the product you want, your first and last name, delivery address, billing details, postal code, phone number.

Insofar as you purchase the „skincare counseling” service, you provide us with your e-mail address for the transmission of the login data necessary to provide this assistance through the Zoom platform. Please note that S.C. MARTIN CLINIC S.R.L. does not keep records of the online sessions carried out via this platform in its own archives.

WHAT IS THE LEGAL BASIS ON WHICH WE PROCESS YOUR DATA?

We process personal data on the basis of your consent, ,

WHAT ARE THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA?

1. For the provision of services for your benefit such as:

a) Account creation and management,

b) Taking, processing, validating, dispatching and invoicing orders,

c) submitting login data for online support on Skin Care products and their features via the online conferencing platform

d) Resolving cancellations or problems of any kind relating to an order, goods or services purchased;

e) Returning products according to the legal provisions;

f) Reimbursement of the value of the products according to the legal provisions;

g) Answering your questions about your orders or our goods and services

2. For compliance with applicable legislation, including tax and accounting legislation.

The personal data collected for the above-mentioned purposes are strictly and imperatively necessary, refusal to provide them will make it impossible to process your orders.

TO WHOM DO WE SHARE YOUR DATA?

Your data will be used in our relationship with the courier companies that will deliver the goods ordered to the delivery address you have indicated. The data transmitted to them will be strictly limited to the service provided.

Your data will not be transferred to other companies, organizations within or outside the country. In case data will be transferred you will be informed.

WHAT IS THE TERM FOR WHICH YOUR DATA IS PROCESSED?

Your personal data that you provide to place an order without creating an account on the www.martinclinic.ro platform will be processed for a period of 3 months after which it will be deleted.

Your personal data that you provide to us by creating an account on the www.martinclinic.ro platform will be stored for as long as you have an account on our website. You may at any time request that we delete certain information or close your account, and we will comply with such requests, subject to the retention of certain information even after the account is closed, where required by applicable law or in our legitimate interests.

Personal data related to payments/invoicing will be stored in accordance with applicable legislation.

HOW DO WE PROTECT YOUR DATA?

We have implemented practices and policies dedicated to the processing of personal data, we have ensured that the data we process is necessary, appropriate and relevant for the purposes of this notice and we have taken technical and security measures to protect your data.

PERSONAL DATA ARE PART OF AN AUTOMATED DECISION-MAKING PROCESS?

We inform you that your personal data are not subject to a decision-making process adopted exclusively by automated means (profiling) for the purpose of assessing personality traits, etc.

WHAT ARE YOUR RIGHTS?

You have the following rights under the law:

Right of access. You can make requests to obtain confirmation of the data processing, the categories of data processed as well as other additional information related to the processing;

Right to rectification . You have the right to request that inaccurate personal data be corrected without undue delay.

Right to erasure („right to be forgotten”) . You have the right to have your personal data deleted without undue delay if one of the following grounds applies:

they are no longer necessary for the purposes for which they were collected or processed;

withdrawal of consent and there is no other legal basis for the processing;

the exercise of the right to object and the absence of legitimate prevailing reasons;

personal data has been processed unlawfully;

personal data must be deleted to comply with a legal obligation;

personal data were collected in connection with the provision of information society services.

Right to restrict processing. You can request restriction of processing in the following cases:

contest the accuracy of the data, for a period allowing the Operator to verify the accuracy of the data;

the processing is unlawful and the individual objects to the deletion of personal data, requesting restriction instead;

where the Controller no longer needs the personal data for the purposes of the processing, but the data subject requests them in order to establish, exercise or defend a right in court;

where the person has objected to the processing for the period of time during which the Controller verifies whether there are other legitimate grounds for processing personal data.

Right to data portability. You have the right to receive your personal data in a structured, commonly used, machine-readable format and the right to have these data transmitted directly to another controller, if technically feasible.

Right to object. This involves your right to object to the processing of your personal data where the processing is not necessary for the performance of a task carried out in the public interest or for the legitimate interest of the controller. Where the processing of personal data is for direct marketing purposes, you have the right to object to the processing at any time.

HOW CAN YOU EXERCISE YOUR RIGHTS?

Rights can be exercised by sending a message to the personal data protection officer at the e-mail address: office@consultanta-dpo.ro or to the controller at the e-mail address office@martinclinic.ro or by sending a written address with acknowledgment of receipt to the controller's headquarters. The deadline for receiving a reply is 30 days.

WHICH AUTHORITY IS COMPETENT FOR DATA PROTECTION?

The National Supervisory Authority for Personal Data Processing (ANSPDCP) is located in Bucharest, B-dul G-ral. Gheorghe Magheru, nr. 28-30, Sector 1, code postal 010336, e-mail: anspdcp@dataprotection.ro. It is responsible for supervising the processing of personal data.